Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 2015c46985 Some updates to the INSTALL document. Tobias Brunner 2012-06-13 12:24:23 +02:00
• 6d599fb964 Removed remaining pluto related configure options. Tobias Brunner 2012-06-13 11:33:32 +02:00
• 25fb9d3f4a starter: Print additional help texts for selected deprecated keywords. Tobias Brunner 2012-06-12 13:59:05 +02:00
• 9707d9db79 starter: Improved how deprecated keywords are handled. Tobias Brunner 2012-06-12 13:57:47 +02:00
• 5c7a219804 Revert "starter: Don't treat unsupported keywords as fatal errors just report them." Tobias Brunner 2012-06-12 11:42:00 +02:00
• 5a6e5e0d2d NEWS about specifying trustchain HASH algorithm requirements Martin Willi 2012-06-12 14:43:55 +02:00
• 7c4214bd38 Add documentation for signature hash algorithm enforcing to man ipsec.conf Martin Willi 2012-06-11 15:48:03 +02:00
• e35bbb9740 Added signature scheme options left/rightauth Martin Willi 2012-06-08 17:04:14 +02:00
• 918e92c4c9 Support multiple different public key strength types in constraints Martin Willi 2012-06-12 14:19:11 +02:00
• fd4ff11858 Add signature schemes to auth_cfg during trustchain validation Martin Willi 2012-06-11 14:52:37 +02:00
• a37f2d2006 certificate_t->issued_by takes an argument to receive signature scheme Martin Willi 2012-06-11 14:33:34 +02:00
• 439d0742e9 Define auth_cfg rules for signature schemes Martin Willi 2012-06-08 16:47:08 +02:00
• e7c01bed49 starter: Fixed parsing of left|right=%any. Tobias Brunner 2012-06-12 10:12:53 +02:00
• 4745fce666 deleted IKEv1 charon-pluto interoperability scenarios Andreas Steffen 2012-06-12 10:00:21 +02:00
• 4d21846912 starter: Fix comparison of connections. Tobias Brunner 2012-05-16 17:18:27 +02:00
• 3e2ff81e5d starter: Removed all unsupported keywords. Tobias Brunner 2012-05-16 16:56:49 +02:00
• e55876a657 starter: Don't treat unsupported keywords as fatal errors just report them. Tobias Brunner 2012-05-16 16:25:32 +02:00
• fff4b74db2 Bye bye Pluto! Tobias Brunner 2012-05-15 16:59:00 +02:00
• 4a54860986 _copyright: Replicate copyright text here instead of calling libfreeswan. Tobias Brunner 2012-05-15 17:12:59 +02:00
• ee3026a1e2 starter: Remove all ties to pluto/libfreeswan. Tobias Brunner 2012-05-15 16:37:02 +02:00
• 5b09310e67 starter: Use custom type for SA specific options (flags). Tobias Brunner 2012-05-15 16:31:46 +02:00
• 29906e0eab starter: Parse left|rightprotoport directly in confread.c. Tobias Brunner 2012-05-15 16:20:15 +02:00
• eca839b0a7 starter: No special handling for left|rightsubnet, just pass it on as string. Tobias Brunner 2012-05-15 15:10:23 +02:00
• 6ce841b213 starter: Use host_t to parse left|rightsourceip. Tobias Brunner 2012-05-15 15:04:11 +02:00
• 0ac29be793 starter: Remove left|rightsubnetwithin option (charon narrows left|rightsubnet down accordingly). Tobias Brunner 2012-05-15 15:00:15 +02:00
• 8dd094e185 starter: Don't resolve any addresses in starter. Tobias Brunner 2012-05-15 13:51:59 +02:00
• efc69e9f38 starter: Removed pfs and pfsgroup options (handled via esp option). Tobias Brunner 2012-05-15 13:26:49 +02:00
• 6d065f14ae starter: Store mode of the IPsec SA/policy in a separate member. Tobias Brunner 2012-05-15 13:12:45 +02:00
• f82365ad27 starter: Use custom type to mark seen keywords. Tobias Brunner 2012-05-15 10:41:08 +02:00
• 57323f6259 starter: Remove left|rightnexthop option. Tobias Brunner 2012-05-14 18:27:53 +02:00
• 753ca22f9c Implement strdupnull() macro as static inline function. Tobias Brunner 2012-05-14 18:04:09 +02:00
• 7cce0e96f2 starter: Replaced all usages of clone_str() with strdupnull(). Tobias Brunner 2012-05-14 17:50:34 +02:00
• e838c39ba9 starter: Parse authby as string. Tobias Brunner 2012-05-14 17:36:46 +02:00
• 041e763b77 starter: Remove main parts of pluto support (invoke, whack). Tobias Brunner 2012-05-14 17:33:03 +02:00
• 95e41fb80a starter: Drop support for %defaultroute. Tobias Brunner 2012-05-14 12:17:50 +02:00
• 163b227386 starter: Migrated logging to libstrongswan. Tobias Brunner 2012-05-14 11:22:57 +02:00
• bcfb6b8efc starter: Remove unneeded starter_exec function. Tobias Brunner 2012-05-14 11:01:35 +02:00
• d7c3fd5421 scepclient: Option added to read PKCS#10 certificate request from a file. Tobias Brunner 2012-06-01 15:25:59 +02:00
• cea9bf563a scepclient: Option added to read self-signed certificate from a file. Tobias Brunner 2012-06-01 14:43:12 +02:00
• 3a7c6b39b5 scepclient: Generate uppercase transaction ID. Tobias Brunner 2012-05-30 15:04:31 +02:00
• f79b665243 scepclient: Use HTTP 1.0 for all requests. Tobias Brunner 2012-05-30 15:02:32 +02:00
• 1d81b1ab18 scepclient: Options added to specify digest/signature algorithms. Tobias Brunner 2012-05-30 14:54:51 +02:00
• cc55783f36 Added function to convert integrity algorithms to hash algorithms (if based on one). Tobias Brunner 2012-05-30 14:46:24 +02:00
• 82e526ce81 Properly encode 0 in ASN.1. Tobias Brunner 2012-05-12 18:21:32 +02:00
• e8120632ae Don't use chunk_skip() in asn1_length(). Tobias Brunner 2012-05-11 16:05:55 +02:00
• 6e6d78a561 Changed memory management and call logic in PKCS#7 parser/generator. Tobias Brunner 2012-05-12 18:15:50 +02:00
• 2bf125f0ed Changed memory management and attribute handling in PKCS#9 wrapper. Tobias Brunner 2012-05-11 17:28:03 +02:00
• f912fedc9b scepclient: Also number CA certificates in case there is more than one. Tobias Brunner 2012-05-11 09:47:56 +02:00
• 04ff78aa33 scepclient: Store received RA certificates, using CA cert name as base. Tobias Brunner 2012-05-10 18:16:08 +02:00
• c6a2aa49b4 scepclient: Use pkcs7_t and pkcs9_t, remove all dependencies to pluto/libfreeswan. Tobias Brunner 2012-05-11 20:31:19 +02:00
• ea92d4f305 Added get_attributes() method to pkcs7_t. Tobias Brunner 2012-05-04 19:29:59 +02:00
• dd93aefc09 scepclient: Local generation of file names. Tobias Brunner 2012-05-04 19:29:07 +02:00
• 50e51bee54 scepclient: Replaced usages of datatot(). Tobias Brunner 2012-05-04 19:26:31 +02:00
• a2ddcc3695 scepclient: Migrated logging to libstrongswan. Tobias Brunner 2012-05-04 15:27:06 +02:00
• a69d8dd000 Log group added for applications other than daemons. Tobias Brunner 2012-05-04 15:22:43 +02:00
• 25924d3e45 scepclient: Some code cleanup. Tobias Brunner 2012-05-04 14:17:59 +02:00
• 07f0abd7ac Updated PKCS#7 parser/generator in libstrongswan. Tobias Brunner 2012-05-04 12:50:21 +02:00
• fd03443f42 added missing parameter in get_my_addr() and get_other_addr() calls Andreas Steffen 2012-06-09 14:06:45 +02:00
• 1527307ec9 version bump to 5.0.0rc1 Andreas Steffen 2012-06-09 14:05:08 +02:00
• 47f8ae7cfd added ikev1/dynamic scenarios using allow-any Andreas Steffen 2012-06-08 22:54:12 +02:00
• 7cc65a0376 removed whitespace Andreas Steffen 2012-06-08 22:34:49 +02:00
• d9e1b4c033 added ikev2/dynamic-two-peers scenario Andreas Steffen 2012-06-08 21:52:20 +02:00
• 68f3e2462a added ikev2/dynamic-responder scenario Andreas Steffen 2012-06-08 21:21:28 +02:00
• 420e77c2d0 added ikev2/dynamic-initiator scenario Andreas Steffen 2012-06-08 16:12:15 +02:00
• 1d315bddd3 implemented the right|leftallowany feature Andreas Steffen 2012-06-08 13:01:08 +02:00
• e5f0f9ff96 Enforce uniqueness policy in IKEv1 main and aggressive modes Martin Willi 2012-06-08 16:15:22 +02:00
• 4a10eda1a0 starter: Go back to single threaded mode. Tobias Brunner 2012-06-07 12:02:14 +02:00
• 05ca56558c Disabled listening for kernel events in starter. Tobias Brunner 2012-06-07 12:00:37 +02:00
• 82ad53b776 Try to rekey without KE exchange if peer returns INVALID_KE_PAYLOAD(NONE) Martin Willi 2012-06-08 10:35:02 +02:00
• 2d4c347af9 While checking for redundant quick modes, compare traffic selectors Martin Willi 2012-06-08 10:18:52 +02:00
• 106b938b6b Store shorter soft lifetime of in- and outbound SAs only Martin Willi 2012-06-05 16:16:07 +02:00
• 7a5f372c57 Initiate quick mode rekeying with narrowed traffic selectors Martin Willi 2012-06-05 15:32:28 +02:00
• d61f2906d4 Use traffic selectors passed to quick mode constructor as initiator Martin Willi 2012-06-05 15:27:34 +02:00
• 1e24fa4614 Instead of rekeying, delete a quick mode if we have a fresher instance Martin Willi 2012-06-05 15:03:10 +02:00
• 9e9295ed10 Properly handle empty RDN values in DN strings. Tobias Brunner 2012-06-07 16:50:11 +02:00
• 9041c074b3 Properly install policies with ports in PF_KEY kernel interface. Tobias Brunner 2012-06-07 14:36:17 +02:00
• ab24a32edf As responder, enforce the same configuration while rekeying CHILD_SAs Martin Willi 2012-06-06 16:00:58 +02:00
• b200fa573b starter: Only handle SIGCHLD asynchronously and the rest in pselect(2). Tobias Brunner 2012-06-06 14:23:25 +02:00
• 21043198ff Show expiration time of rekeyed CHILD_SAs in statusall Martin Willi 2012-06-05 10:29:06 +02:00
• 18a3741042 starter: (De-)Initialize logging when forking. Tobias Brunner 2012-06-04 12:55:05 +02:00
• 402ae88af9 starter: Close open file descriptors when forking daemons. Tobias Brunner 2012-05-31 16:44:03 +02:00
• 89c97952bd starter: Changed signal handling now that starter is multi-threaded. Tobias Brunner 2012-05-31 15:53:47 +02:00
• c8f7a114b6 Mark CHILD_SAs used for trap policies to uninstall them properly. Tobias Brunner 2012-06-04 17:43:38 +02:00
• 93d9a02e9e NEWS for 4.6.4 added. Tobias Brunner 2012-05-28 12:44:38 +02:00
• 79d5c4f06b Fixed return values of several functions (e.g. return FALSE for pointer types). Tobias Brunner 2012-05-07 15:47:00 +02:00
• 060b508e0e Fix boolean return value if an empty RSA signature is detected in gmp plugin Martin Willi 2012-05-07 13:51:46 +02:00
• 77e4282643 Avoid queueing more than one retry initiate job. Tobias Brunner 2012-05-25 16:09:31 +02:00
• 60c82591c5 Retry IKE_SA initiation if DNS resolution failed. Tobias Brunner 2012-05-25 15:30:32 +02:00
• eac9d77059 Job added to re-initiate an IKE_SA. Tobias Brunner 2012-05-25 15:24:57 +02:00
• 6f948c5c8d added nonce plugin to gcrypt scenarios Andreas Steffen 2012-05-30 07:21:03 +02:00
• 08951eb7a8 upgraded ipv6 scenarios to 5.0.0 Andreas Steffen 2012-05-29 23:40:01 +02:00
• 53915f14ae Fix MOBIKE address update if responder address changed. Tobias Brunner 2012-05-09 17:53:34 +02:00
• a46fe56858 Resolve hosts before reauthenticating due to address change. Tobias Brunner 2012-05-09 15:46:17 +02:00
• c6da59f014 Don't queue delete_ike_sa job when setting IKE_DELETING. Tobias Brunner 2012-05-09 15:28:29 +02:00
• 7457143072 During reauthentication reestablish IKE_SA even if deleting the old one fails. Tobias Brunner 2012-05-09 15:15:43 +02:00
• 23470d849a Integrated main parts of IKE_REAUTH task into ike_sa_t.reestablish. Tobias Brunner 2012-05-09 15:14:34 +02:00
• 12715f1953 Fixed route lookup in case MOBIKE is not enabled. Tobias Brunner 2012-05-08 16:48:51 +02:00
• be982b4c03 enable xauth-eap plugin in UML scenarios Andreas Steffen 2012-05-25 17:02:39 +02:00
• 2be46da56d added nonce plugin in default host configurations Andreas Steffen 2012-05-25 17:00:03 +02:00
• da7a46b73b upgraded ike scenarios to 5.0.0 Andreas Steffen 2012-05-25 16:58:17 +02:00